Validators need a Sentry? What's the required architectural setup?

It is not required but recommended.
The purpose is to have redundancy, and also a layer of protection.

Here’s a detailed discussion on the topic: